Managing drivers is one of the areas ISO auditors regularly find gaps. This article explains the workforce management side of drivers - licence checks, authorisation, eyesight checks, declarations and competence - for employees who drive on business.
Home and hybrid working has become a standard way of working for many roles, but it still needs the same structured approach to risk, information security and employee support as anyone working on site.
Consulting workers on matters that affect them and giving them a real voice in how things are run is both a legal duty and a specific requirement of ISO 45001.
This section of the Knowledge Base covers managing staff and workers - recruitment, induction, competence, training, communication and the day-to-day management activities that make a workforce effective and compliant. It is UK-focused but written to be useful to readers elsewhere who can apply the same principles under their own local legislation.
The articles cover the full employment cycle from recruitment and right to work checks through induction, training and ongoing management to leavers and offboarding. Each article picks a specific topic, explains the principles, gives practical advice on what to put in place, and points to the alphaZ documents that support that part of the management system.
People are usually the largest cost in a business and almost always the largest source of both performance and risk. The same person can be the customer-facing professional who wins the next contract or the worker whose mistake triggers the regulatory investigation. The systems that recruit, train, support and manage workers shape which of those is more likely.
For ISO management systems, the staff management section is where the requirements on competence, awareness, communication and human resources land in practical terms. ISO 9001, ISO 14001, ISO 45001 and ISO 27001 all require workers to be competent for the work they do, aware of the policies and procedures that apply, and informed about how their work affects quality, environment, safety and security. The articles in this section translate those requirements into recruitment processes, training records, induction checklists and the supporting policies.
Auditors look at different areas concerning the management of staff and workers, are workers competent for their roles? Do they show awareness of the company policies? Are there records available for their competenece?
UK employment law is wide-ranging. The Employment Rights Act 1996 sets out the core rights and obligations of employees and employers including written particulars of employment, unfair dismissal and statutory leave. The Equality Act 2010 sets the framework for protection from discrimination and for the duty to make reasonable adjustments. The Working Time Regulations 1998 set rules on working hours, rest breaks and annual leave. The National Minimum Wage Act 1998 and the National Living Wage set pay floors that vary by age and apprenticeship status.
For health and safety, the Health and Safety at Work etc. Act 1974 and the Management of Health and Safety at Work Regulations 1999 place the framework duties on employers and on workers. Sector-specific legislation may add further requirements - drivers, healthcare workers, those working with children or vulnerable adults, and many regulated professions all have particular rules. Right-to-work checks under the Immigration, Asylum and Nationality Act 2006 apply to all employers regardless of size or sector.
Articles in our Legal and Compliance section cover the broader employment law angle; this section focuses on the controls that translate the legal duties into day-to-day staff management practice.
Every ISO management system standard has requirements on people. Workers must be competent - meaning they have the right skills, knowledge and experience for what they do, supported by training where there are gaps. They must be aware of the management system and the policies that apply to their role. Communication arrangements must be in place so that decisions, changes and issues flow up, down and across the organisation. The IMS1 manual integrates these requirements across ISO 9001, ISO 14001, ISO 45001 and ISO 27001 using the same competence and training records rather than running them in parallel.
The integration of staff management across multiple ISO standards is one of the biggest practical advantages of running an integrated management system. One competence framework, one induction programme, one training register, one consultation arrangement - applied to all the standards rather than each one running its own. The audits go faster too.
For organisations setting up or reviewing their staff management arrangements, the practical starting point is the workforce itself. List the roles, identify the competence each role requires, record what evidence supports each worker's competence today, and identify the gaps. From there the training plan, induction programme and ongoing development arrangements follow naturally.
The articles in this section walk through each of the main staff management topics, the controls that work in practice, and the alphaZ documents that support each one. Most of the work is about consistency rather than complexity - applying the same approach to recruitment, induction, training, support and offboarding for every worker, rather than running each case as a one-off.
The single most useful thing I tell organisations to focus on is the induction. Every new starter, regardless of role, gets a structured induction that covers the management system, the policies that apply, and the practical "this is how we do things here" content. If induction is solid, almost everything else gets easier - workers know what is expected, where to find policies, who to ask, and how the management system fits around their job rather than feeling like an extra demand. Skip it or rush it and the same questions come up six months later, this time as a complaint or an incident.